Skip to content
SaveThis

Privacy Policy

Last Updated: August 24, 2026

My Commitment to Your Privacy

Your privacy is important to me. At SaveThis, I take the security of your personal information as seriously as I take the preservation of your physical memories. My goal is to be completely transparent about how I handle data, both on this website and throughout your project. This policy is written in plain English to make it clear and easy to understand.

The Short Version

  • I only collect the personal information I need to contact you about your project (like your name and email).
  • I will never, ever sell your personal information.
  • Your precious media (tapes, photos, etc.) and the resulting digital files are handled with absolute confidentiality and are never shared with anyone.
  • This website uses standard tools like cookies and analytics to function and to help me understand how visitors use the site.
  • I use trusted, professional third-party services for things like appointment booking, file delivery (Google Drive), and payment processing. I never see your credit card information.

The Longer, More Detailed Version

Information You Provide to Me

When you fill out a contact form or a project estimate form on my website (savethis.ca), you’re providing me with personal information like your name, email address, and details about your collection. I use this information for one reason only: to communicate with you about your project. I keep these communications for client service purposes, but I will not use them for marketing or add you to a mailing list.

Information Related to Your Project

This is the most important part.

  • Your Physical Media: Your photos, tapes, films, and other media are handled exclusively by me, Dave Phillips, in my secure, private workshop in Colwood. They are never outsourced or sent away.
  • Your Digital Files: The final digital files I create for you are delivered via a secure, private Google Drive link. I maintain a secure backup of your completed project for 60 days after delivery as a safety net for you. After 60 days, I permanently delete all of your digital project files from my systems.

Website & Third-Party Service Information

Like most websites, this one uses some standard tools to function and improve the visitor experience.

  • Cookies: Cookies are small text files stored on your browser. They are used for basic site functions, like remembering your information if you leave a comment so you don’t have to type it in again.
  • Analytics: I use Google Analytics to understand how visitors interact with my website. This information is anonymized and helps me make the site better. It does not personally identify you.
  • Trusted Third-Party Services: To provide a seamless service, I use a few carefully chosen third-party partners:
    • An appointment scheduling service to book your drop-off time.
    • Google Drive for secure digital file delivery.
    • A secure payment processor (Square) to handle invoices. I never see or store your credit card details.

Your Rights Over Your Data

You have the right to know what you’re sharing. You can request to receive an exported file of the personal data I hold about you. You can also request that I erase your personal data, excluding data I am obliged to keep for administrative, legal, or security purposes.

If you have any questions at all about this policy or how your information is handled, please don’t hesitate to contact Dave at [email protected]. I'm committed to making this a clear and reassuring experience for you.

Send to my Google Photos

If you ask me to, I can put your finished scans straight into your own Google Photos. You sign in with Google once, from a link I email you, and give SaveThis one permission: to add photos to your library. That permission cannot see what is already in your library, cannot change anything, and cannot delete anything.

Google also tells me the email address of the account you signed in with. I use it for one thing: checking it is the address I sent the link to, so nobody else can point your photos at their own account.

To do the upload, Google gives me a sign-in key for your account. I keep that key only so I can add your photos, including any later boxes from the same job. I do not use it for anything else, I do not share it with anyone, and I delete it once your job is complete. You can also cut it off yourself at any time at myaccount.google.com/permissions, or email me at [email protected] and I will remove it that day.

How I keep it safe

  • Encrypted the whole way. Everything travelling between your browser, Google and my systems goes over an encrypted connection (HTTPS, TLS 1.2 or better). Nothing about your Google sign-in ever moves in the clear.
  • Encrypted where it sits. The sign-in key is stored encrypted at rest in my database (Supabase, hosted on AWS), in a table with row-level security switched on and no read policy at all, so only the server itself can reach it. It is never written into a log file and never emailed. While an upload is actually running, my workshop computer holds it in a single file only that computer’s owner can read, and that file is deleted the moment the upload finishes, successfully or not. It is never kept there between jobs.
  • One person. SaveThis is me, Dave Phillips, on my own. No staff, no contractors, no agency, nobody else with a login. Nobody but me can reach your sign-in key or your files.
  • One purpose. The key is used for exactly one thing: adding your finished scans to your own Google Photos. It is never used to read, list, change or delete anything in your library, never sold, never rented, never handed to an advertiser or a data broker.
  • No machine learning. Nothing obtained from your Google account is used to develop, improve or train any artificial-intelligence or machine-learning model, mine or anyone else's.
  • Kept only as long as it is needed. I delete the sign-in key once your job is complete, and sooner if you ask. You can also cut it off yourself at any moment at myaccount.google.com/permissions, or email me at [email protected] and I will remove it that day.
  • If anything ever went wrong. If I had any reason to believe your information had been exposed, I would tell you directly, by email, and tell you what to do about it.

SaveThis's use of information received from Google Photos APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.